$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IXB3xza3gQLfRCF5vsdaARFpjVg.roa File: IXB3xza3gQLfRCF5vsdaARFpjVg.roa (raw, json) Hash identifier: uvRP0zBlV+kvG9mvMkHe8BvmkyPOq+bSUryAf9LC0tg= Subject key identifier: 21:70:77:C7:36:B7:81:02:DF:44:21:79:BE:C7:5A:01:11:69:8D:58 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 1822 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IXB3xza3gQLfRCF5vsdaARFpjVg.roa Signing time: Tue 31 Mar 2026 08:05:20 +0000 ROA not before: Tue 31 Mar 2026 08:05:20 +0000 ROA not after: Mon 15 Mar 2027 01:30:02 +0000 asID: 9605 IP address blocks: 27.230.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6178 (0x1822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Mar 31 08:05:20 2026 GMT Not After : Mar 15 01:30:02 2027 GMT Subject: CN=217077C736B78102DF442179BEC75A0111698D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:7c:1d:ed:4d:6c:97:27:f7:63:fc:79:08: 21:12:b8:0b:8e:8c:f8:38:e3:87:f9:ff:42:db:bc: 79:29:d2:9c:68:c7:d6:78:21:1e:c7:3e:d9:89:b7: 7c:24:21:26:83:d1:d4:2d:a3:5b:f2:c3:bd:37:79: 65:9d:bf:f3:e1:cf:6d:b0:0e:20:f7:23:5f:36:a2: fd:c5:22:0f:6b:a9:cc:8f:5f:6f:2f:66:f0:54:76: a7:f2:4e:ac:51:8d:c1:2e:1d:fa:e5:9f:6b:78:17: c8:c4:b6:94:fe:0c:57:c5:43:25:63:50:85:74:d0: 56:1a:2c:c7:33:d6:ce:ce:8e:66:82:a5:f4:7f:65: af:ac:0a:86:22:a0:9d:a0:fa:b2:11:65:84:74:d7: 56:2b:bb:97:a5:f8:e9:a0:35:ff:44:3a:19:46:19: 52:6e:5f:92:de:62:d0:8b:dc:26:b6:aa:50:97:c9: 72:86:ae:f2:95:70:a1:13:e5:3f:38:a4:fc:c2:7d: 82:4e:5d:60:d8:0b:52:1c:1a:e1:93:a4:42:ce:2b: 20:91:7b:ac:8a:cc:ad:ec:0c:b3:58:58:39:dd:eb: 80:d8:d9:25:2f:6b:83:d8:fc:8a:ea:d4:90:fa:1a: 55:4f:3b:c6:6f:36:99:cc:96:5c:4c:43:70:d4:54: 27:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:70:77:C7:36:B7:81:02:DF:44:21:79:BE:C7:5A:01:11:69:8D:58 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IXB3xza3gQLfRCF5vsdaARFpjVg.roa sbgp-ipAddrBlock: critical IPv4: 27.230.42.0/24 Signature Algorithm: sha256WithRSAEncryption 15:19:9a:3c:37:ab:66:60:83:1d:42:9b:4d:16:6d:fa:93:32: 13:9c:a7:7b:4c:bf:43:2f:f4:90:3d:78:35:0a:5c:30:90:1b: 3d:a9:58:bf:85:a0:d9:99:ff:81:94:7c:04:81:38:79:69:17: 33:4e:85:7b:cd:65:a9:b1:cc:ae:33:8b:9d:3a:a0:1f:6e:b6: 99:66:78:24:de:82:29:53:fc:f1:7d:e1:af:b0:48:b1:27:3f: 8d:a1:00:e8:b0:bb:6c:92:90:ae:8e:10:01:36:eb:31:ab:48: 7b:11:1a:4e:fd:5c:8d:92:8e:fa:2e:fb:a9:f4:e3:61:35:72: f9:13:d1:73:7f:db:fc:ee:0b:6d:6d:30:65:df:a4:29:c6:bd: 9c:ee:2b:6c:06:b8:39:b9:1a:ca:33:bf:fe:39:c7:30:6a:a3: 3f:ec:9f:ff:75:76:00:8d:9b:07:aa:45:33:b5:7d:30:21:e2: 76:6a:bf:45:18:61:2a:c1:c1:ca:59:71:4e:2b:36:48:8e:4d: ad:9c:66:ff:d8:b1:1a:61:3f:93:8f:ef:0f:63:a1:9f:aa:c8: a8:9c:f1:7b:1e:e6:31:22:3c:9b:5e:a0:6b:e3:df:4b:97:75: 16:7c:6b:6c:04:15:e2:e1:8e:96:de:61:6a:ca:8f:3e:e6:98: ab:3d:19:38 -----BEGIN CERTIFICATE----- MIIEvTCCA6WgAwIBAgICGCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw ODA1MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIxNzA3N0M3MzZCNzgx MDJERjQ0MjE3OUJFQzc1QTAxMTE2OThENTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWWHwd7U1slyf3Y/x5CCESuAuOjPg444f5/0LbvHkp0pxox9Z4 IR7HPtmJt3wkISaD0dQto1vyw703eWWdv/Phz22wDiD3I182ov3FIg9rqcyPX28v ZvBUdqfyTqxRjcEuHfrln2t4F8jEtpT+DFfFQyVjUIV00FYaLMcz1s7OjmaCpfR/ Za+sCoYioJ2g+rIRZYR011Yru5el+OmgNf9EOhlGGVJuX5LeYtCL3Ca2qlCXyXKG rvKVcKET5T84pPzCfYJOXWDYC1IcGuGTpELOKyCRe6yKzK3sDLNYWDnd64DY2SUv a4PY/Irq1JD6GlVPO8ZvNpnMllxMQ3DUVCfRAgMBAAGjggHZMIIB1TAdBgNVHQ4E FgQUIXB3xza3gQLfRCF5vsdaARFpjVgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvMzA5L0lYQjN4emEzZ1FMZlJDRjV2c2RhQVJGcGpWZy5yb2EwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAb5iowDQYJKoZIhvcNAQELBQADggEB ABUZmjw3q2Zggx1Cm00WbfqTMhOcp3tMv0Mv9JA9eDUKXDCQGz2pWL+FoNmZ/4GU fASBOHlpFzNOhXvNZamxzK4zi506oB9utplmeCTegilT/PF94a+wSLEnP42hAOiw u2ySkK6OEAE26zGrSHsRGk79XI2Sjvou+6n042E1cvkT0XN/2/zuC21tMGXfpCnG vZzuK2wGuDm5Gsozv/45xzBqoz/sn/91dgCNmweqRTO1fTAh4nZqv0UYYSrBwcpZ cU4rNkiOTa2cZv/YsRphP5OP7w9joZ+qyKic8Xse5jEiPJteoGvj30uXdRZ8a2wE FeLhjpbeYWrKjz7mmKs9GTg= -----END CERTIFICATE-----Generated at Tue Apr 7 19:43:06 2026 by rpki-client